“Over the next 12\u201318 months, we expect Chinese-origin model families to play an increasingly central role in the open-source LLM ecosystem, particularly as Western frontier labs slow or constrain open-weight releases,” Gabriel Bernadett-Shapiro, distinguished AI research scientist at SentinelOne, told TechForge Media’s AI News<\/em>.<\/p>\n\n\n\n The finding arrives as OpenAI, Anthropic, and Google face regulatory scrutiny, safety review overhead, and commercial incentives pushing them toward API-gated releases rather than publishing model weights freely. The contrast with Chinese developers couldn’t be sharper.<\/p>\n\n\n\n Chinese labs have demonstrated what Bernadett-Shapiro calls “a willingness to publish large, high-quality weights that are explicitly optimised for local deployment, quantisation, and commodity hardware.”<\/p>\n\n\n\n “In practice, this makes them easier to adopt, easier to run, and easier to integrate into edge and residential environments,\u201d he added.<\/p>\n\n\n\n Put simply: if you’re a researcher or developer wanting to run powerful AI on your own computer without a massive budget, Chinese models like Qwen2 are often your best\u2014or only\u2014option.<\/p>\n\n\n\n The research shows this dominance isn’t accidental. Qwen2 maintains what Bernadett-Shapiro calls “zero rank volatility”\u2014it holds the number two position across every measurement method the researchers examined: total observations, unique hosts, and host-days. There’s no fluctuation, no regional variation, just consistent global adoption.<\/p>\n\n\n\n The co-deployment pattern is equally revealing. When operators run multiple AI models on the same system\u2014a common practice for comparison or workload segmentation\u2014the pairing of Llama and Qwen2 appears on 40,694 hosts, representing 52% of all multi-family deployments.<\/p>\n\n\n\n Geographic concentration reinforces the picture. In China, Beijing alone accounts for 30% of exposed hosts, with Shanghai and Guangdong adding another 21% combined. In the United States, Virginia\u2014reflecting AWS infrastructure density\u2014represents 18% of hosts.<\/p>\n\n\n\n “If release velocity, openness, and hardware portability continue to diverge between regions, Chinese model lineages are likely to become the default for open deployments, not because of ideology, but because of availability and pragmatics,” Bernadett-Shapiro explained.<\/p>\n\n\n\n This shift creates what Bernadett-Shapiro characterises as a “governance inversion”\u2014a fundamental reversal of how AI risk and accountability are distributed.<\/p>\n\n\n\n In platform-hosted services like ChatGPT, one company controls everything: the infrastructure, monitors usage, implements safety controls, and can shut down abuse. With open-weight models, the control evaporates. Accountability diffuses across thousands of networks in 130 countries, while dependency concentrates upstream in a handful of model suppliers\u2014increasingly Chinese ones.<\/p>\n\n\n\n The 175,000 exposed hosts operate entirely outside the control systems governing commercial AI platforms. There’s no centralised authentication, no rate limiting, no abuse detection, and critically, no kill switch if misuse is detected.<\/p>\n\n\n\n “Once an open-weight model is released, it is trivial to remove safety or security training,” Bernadett-Shapiro noted.”Frontier labs need to treat open-weight releases as long-lived infrastructure artefacts.”<\/p>\n\n\n\n A persistent backbone of 23,000 hosts showing 87% average uptime drives the majority of activity. These aren’t hobbyist experiments\u2014they’re operational systems providing ongoing utility, often running multiple models simultaneously.<\/p>\n\n\n\n Perhaps most concerning: between 16% and 19% of the infrastructure couldn’t be attributed to any identifiable owner.”Even if we are able to prove that a model was leveraged in an attack, there are not well-established abuse reporting routes,” Bernadett-Shapiro said.<\/p>\n\n\n\n Nearly half (48%) of exposed hosts advertise “tool-calling capabilities”\u2014meaning they’re not just generating text. They can execute code, access APIs, and interact with external systems autonomously.<\/p>\n\n\n\n “A text-only model can generate harmful content, but a tool-calling model can act,” Bernadett-Shapiro explained. “On an unauthenticated server, an attacker doesn’t need malware or credentials; they just need a prompt.”<\/p>\n\n\n\n The highest-risk scenario involves what he calls “exposed, tool-enabled RAG or automation endpoints being driven remotely as an execution layer.” An attacker could simply ask the model to summarise internal documents, extract API keys from code repositories, or call downstream services the model is configured to access.<\/p>\n\n\n\n When paired with “thinking” models optimised for multi-step reasoning\u2014present on 26% of hosts\u2014the system can plan complex operations autonomously. The researchers identified at least 201 hosts running “uncensored” configurations that explicitly remove safety guardrails, though Bernadett-Shapiro notes this represents a lower bound.<\/p>\n\n\n\n In other words, these aren’t just chatbots\u2014they’re AI systems that can take action, and half of them have no password protection.<\/p>\n\n\n\n For Western AI developers concerned about maintaining influence over the technology’s trajectory, Bernadett-Shapiro recommends a different approach to model releases.<\/p>\n\n\n\n “Frontier labs can’t control deployment, but they can shape the risks that they release into the world,” he said. That includes “investing in post-release monitoring of ecosystem-level adoption and misuse patterns” rather than treating releases as one-off research outputs.<\/p>\n\n\n\n The current governance model assumes centralised deployment with diffuse upstream supply\u2014the exact opposite of what’s actually happening. “When a small number of lineages dominate what’s runnable on commodity hardware, upstream decisions get amplified everywhere,” he explained. “Governance strategies must acknowledge that inversion.”<\/p>\n\n\n\n But acknowledgement requires visibility. Currently, most labs releasing open-weight models have no systematic way to track how they’re being used, where they’re deployed, or whether safety training remains intact after quantisation and fine-tuning.<\/p>\n\n\n\n Bernadett-Shapiro expects the exposed layer to “persist and professionalise” as tool use, agents, and multimodal inputs become default capabilities rather than exceptions. The transient edge will keep churning as hobbyists experiment, but the backbone will grow more stable, more capable, and handle more sensitive data.<\/p>\n\n\n\n Enforcement will remain uneven because residential and small VPS deployments don’t map to existing governance controls. “This isn’t a misconfiguration problem,” he emphasised. “We are observing the early formation of a public, unmanaged AI compute substrate. There is no central switch to flip.”<\/p>\n\n\n\n The geopolitical dimension adds urgency. “When most of the world’s unmanaged AI compute depends on models released by a handful of non-Western labs, traditional assumptions about influence, coordination, and post-release response become weaker,” Bernadett-Shapiro said.<\/p>\n\n\n\n For Western developers and policymakers, the implication is stark: “Even perfect governance of their own platforms has limited impact on the real-world risk surface if the dominant capabilities live elsewhere and propagate through open, decentralised infrastructure.”<\/p>\n\n\n\n The open-source AI ecosystem is globalising, but its centre of gravity is shifting decisively eastward. Not through any coordinated strategy, but through the practical economics of who’s willing to publish what researchers and operators actually need to run AI locally.<\/p>\n\n\n\n The 175,000 exposed hosts mapped in this study are just the visible surface of that fundamental realignment\u2014one that Western policymakers are only beginning to recognise, let alone address.<\/p>\n\n\n\n See also: Huawei details open-source AI development roadmap at Huawei Connect 2025<\/a><\/strong><\/p>\n\n\n\n Want to learn more about AI and big data from industry leaders?<\/strong> Check out AI & Big Data Expo<\/a> taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx<\/a> and is co-located with other leading technology events including the Cyber Security & Cloud Expo<\/a>. Click here<\/a> for more information.<\/p>\n\n\n\n AI News is powered by TechForge Media<\/a>. Explore other upcoming enterprise technology events and webinars here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Because Western AI labs won’t\u2014or can’t\u2014anymore. As OpenAI, Anthropic, and Google face mounting pressure to restrict their most powerful models, Chinese developers have filled the open-source void with AI explicitly built for what operators need: powerful models that run on commodity hardware. A new security study reveals just how thoroughly Chinese AI has captured this space. Research published by SentinelOne […]<\/p>\n","protected":false},"author":60725,"featured_media":112065,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3333,3335,1,3371,3337,3336,3339],"tags":[186,192,1962],"ppma_author":[2975],"class_list":["post-112060","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-and-us","category-ai-in-action","category-artificial-intelligence","category-deep-dives","category-features","category-inside-ai","category-open-source-democratised-ai","tag-ai","tag-artificial-intelligence","tag-open-source"],"acf":[],"yoast_head":"\nPragmatics, not ideology<\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.artificialintelligence-news.com\/wp-content\/uploads\/2026\/02\/Silent_Brothers_Chart_01-12-2026_03-scaled.jpg-1024x719.avif\")
![\"\"](\"https:\/\/www.artificialintelligence-news.com\/wp-content\/uploads\/2026\/02\/Silent_Brothers_Chart_01-12-2026_02-scaled.jpg-1024x719.avif\")
The governance problem<\/h3>\n\n\n\n
Security without guardrails<\/h3>\n\n\n\n
![\"\"](\"https:\/\/www.artificialintelligence-news.com\/wp-content\/uploads\/2026\/02\/Silent_Brothers_Chart_01-12-2026_01-scaled.jpg-1024x719.avif\")
What frontier labs should do<\/h3>\n\n\n\n
The 12-18 month outlook<\/h3>\n\n\n\n
![\"Banner](\"https:\/\/www.artificialintelligence-news.com\/wp-content\/uploads\/2026\/01\/image-3.png\")
<\/a><\/figure>\n\n\n\n